MetaCert pitch deck
0 likes955 views
MetaCert provides security services to protect mobile apps and in-app browsers from malicious links and inappropriate content. Their goal is to become the invisible security layer for all URLs and IP addresses connecting devices, APIs, apps and websites. Their go-to-market strategy focuses on team collaboration apps due to their exponential growth. They have developed a security API that can be easily integrated by app developers to scan links for malware, phishing and other inappropriate categories before users open them. Their target customers include small businesses creating apps, enterprises using team collaboration apps, and app development platforms.
![METACERT’S WEB CATEGORIZATION
PLATFORM IS PURE MAGIC!
When an end-user tries to share or open the image http://imgur.com/r/sex/
sex.html MetaCert’s API sends a request to MetaCert’s trusted database
‘TrustServ’, to see if it is safe to open or not. The syntax on the right is the
response given to the API call.
imgur.com is a reputable image sharing website used by millions of people.
It would be wrong to categorize the entire site as ‘XXX’ even though there is
a large number of images that are nsfw uploaded on a regular basis.
It is technically impossible for any company to classify images the minute
they are uploaded - or even soon afterwards. So across the web, tens of
millions of URLs go unclassified by MetaCert’s competitors.
MetaCert’s unique system has classified imgur.com as ‘image sharing’ and
imgur.com/r/sex/ as ‘XXX’. This means every image uploaded to that folder
will be automatically classified and therefore, detected by our Security API.
This is pure magic. And it’s the reason MetaCert Founder Paul Walsh co-
instigated the creation of the W3C Standard for web categorization,
replacing PICS in 2009!
2 8
{
“status”: {
“code”: 200,
“message”: “OK”
},
“data”: {
“URLs”: [
{
“url”: “http://imgur.com/r/sex/sexy.html”,
“type”: “xxx”
}
],
“Folders”: [
{
“folder”: “/r/sex/“,
“type”: “xxx”,
}
],
“Domains”: [
{
“domain”: “imgur.com”,
“type”: “image-sharing”
}
]
}
}](https://image.slidesharecdn.com/metacertinvestordeck26jan2016detailedversion-170126182022-201203065449/85/MetaCert-pitch-deck-30-320.jpg)
MetaCert pitch deck
- 1. Security for Mobile Apps Paul Walsh paul@metacert.com +1 415 994 4274
- 2. Our mission is to provide the invisible security layer for every URL and IP address that connects devices, APIs, apps and websites - protecting business from cyberattacks via malicious links. Our go-to-market strategy starts with in-app security focussing on team collaboration because it is a vertical that is currently going through exponential growth. 1
- 3. MORE PEOPLE ARE OPENING WEB LINKS INSIDE APPS INSTEAD OF MOBILE BROWSERS Users have come to expect security from browsers. So they assume they’re safe when opening links inside apps. Present Future S A F A R I I N - A P P B R O W S E R 2
- 4. HOW DO YOU KNOW THIS REALLY IS BANK OF AMERICA? Millions of people now browse the web inside apps like Slack, HipChat, LinkedIn, Facebook, Messenger, Twitter et al. Present Future S A F A R I N A T I V E B R O W S E R S L A C K I N - A P P B R O W S E R No Padlock URL is hidden 3
- 5. In-app browsing doesn’t have built-in security like native browsers; Safari and Chrome. Millions of apps built by SMEs have no easy reliable way to protect users from malicious and inappropriate web links. and… Businesses that use Team Collaboration apps to share sensitive information are most vulnerable because of an exponentially increased user base - and security hasn’t had time to keep up. THE PROBLEM 4
- 6. WHY NOW FOR IN-APP SECURITY? Thanks to DIY app making platforms app creation by SMEs is EXPLODING and will surpass that of Internet domain names in 2016 Time spent within mobile apps now EXCEEDS desktop web access Source: comScore 2 0 1 3 2 0 1 4 T O T A L M I N U T E S P E R M O N T H I N T H E U S : 5
- 7. WHY NOW FOR TEAM COLLABORATION SECURITY? Millions of staff who work for businesses like Bank of America, Uber, Capital One and Intuit open web links inside team collaboration apps every day - with no protection against malicious links & inappropriate content. T H E N N O W Users open web links using a desktop browser Users open web links inside mobile apps 6 In the last two years, 21% of mobile web traffic came from in-app browsers
- 8. It takes a Channel Partner 60mins to integrate the Security API. It takes 30 seconds for an SME to select and pay for MetaCert’s security services. Integration for SMEs is automated and easier than buying an SSL certificate for a website. THE SOLUTION FOR SMES ON APP MAKING PLATFORMS 7
- 9. No hardware or software required. It takes 30 seconds for an Enterprise customer to add MetaCert to HipChat. Only one person is required to install our integration for it to work across every device in the organization. 8 THE SOLUTION FOR TEAM COLLABORATION
- 10. THE SOLUTION FOR TEAM COLLABORATION MetaCert monitors every message, alerting users when a malicious link has been detected. MetaCert has built the world’s first anti-spear phishing solution for Team Collaboration. Users can flag and immediately warn IT about new malicious links before harm is done. 9
- 11. THE SOLUTION FOR TEAM COLLABORATION We make MetaCert more sticky by providing message analytics for Management. Management can monitor the type of websites that staff share across all messages. Management can easily find out which websites are mostly accessed across the organization. 1 0
- 12. HOW IT WORKS Adrian works for Intuit. He’s working from home and about to open a link inside HipChat Every link is checked against MetaCert’s treat intelligence system in the cloud Adrian is warned that this is a phishing site & he should proceed with caution 1 1 S E C U R I T Y A P I Is this safe to open? Malware, Phishing, XXX
- 13. REVENUE MODEL Anti-Phishing & Malware Protection Pornography-blocking Future services include App Identity Verification to help businesses differentiate their app from malicious/clone apps We sell the following services Enterprise customers that use Team Collaboration Services SMEs that build Apps using App Making Platforms $ 1.50 per user/ per month Fixed for all services $5 per app/ per month Each service is paid for separately 1 2
- 14. SMEs that build apps using an App Making Platform (Channel Reseller) MetaCert Platform Partners benefit by promoting their apps as more secure than those built on other platforms. SMEs are offered MetaCert before checkout. SMEs pay for MetaCert to help differentiate their app in an increasingly busy search and discovery ecosystem. 1 Platform SME pays $5 /m for each service $10 Million Annual RR 1.5 Million App Publishers 2 Million Apps 50% of apps built on AppMakr last month subscribed to at least one service. 85% of those subscribed to ‘Malware & Phishing’ & ‘XXX- Blocking’. 1 3 BUSINESS MODEL
- 15. BUSINESS MODEL Enterprises - Team Collaboration Team Collaboration companies benefit from offering MetaCert to their Enterprise customers, by promoting their service as more secure than corporate email. Partners like HipChat will promote and market MetaCert, making it easy for us to scale quickly. 1 Channel Partner Customer pays $1.50 /m per user $18,000 Annual RR 1 Enterprise Customer 1,000 employees 1 4
- 16. STRATEGIC PARTNERSHIPS / INTEGRATIONS Team Collaboration Team Collaboration Frameworks & Platforms Operating Systems Our live platform integrations with AppMakr and appery.io will be leveraged to attract other app making platforms in 2016. We are in discussion with Ionic and Appcelerator. HipChat has committed to marketing MetaCert to its 50,000 enterprise customers in 2016. Slack reached out to us in December 2015 about a “deep and meaningful” partnership. They have 2 million daily active users. 1 5 App Making Platforms
- 17. GO-TO-MARKET STRATEGY • We will go after distribution partnerships that will give us wide reach i.e. bottom of the pyramid - app making platforms e.g. AppMakr • Go after strategic partnerships with long term growth potential e.g. HipChat - 49K+ customers • Embed at the OS level e.g. Android - long term roadmap • HipChat is actively helping MetaCert go-to-market with pilot customers - approaching Twitter and other large customers Tactics: Drive Reach Through Strategic Partnerships & Distribution 1 6 • TechCrunch and BI articles; blog posts • Speak at mobile security conferences • Promote with strategic partners e.g. HipChat Tactics: Drive Awareness of Problem • Drive successful Proof of Concept • (POC) trials with partners and pilots e.g. HipChat will help with PR • Gather quantitative and qualitative data through POC; e.g. blocked x number of suspicious links • Customer case studies with testimonials Tactics: Demonstrate Solving Problem
- 18. OUR ADDRESSABLE MARKET United States Only The Global Cybersecurity market is expected to grow from $86B to $155.74B by 2019 # of HipChat Enterprise Customers (Enterprise Communication) 49,000 Avg number of users per customer 250 Total number of users 12,250,000 Monthly price per user $1.50 Monthly Revenue $18,375,000 Annual RR $220,500,000 Total # of Enterprise Customers (Enterprise Communication) 595,812 Number of employees 95,529,679 Annual RR $1,719,534,222 # of MSMEs that will build long tail apps 5,707,941 Monthly price of each Security Service $5 Avg Services per company 1.3 Total Potential Subscriptions 7,420,323 Annual RR $445,219,398 # of companies that will pay for ID Verification 400,000 Avg Annual price per app $450 Annual RR $270,000,000 TOTAL ANNUAL RR (US Only) $2,655,253,620 1 7
- 19. CORE BACKEND TECHNOLOGY One API: It takes a developer less than an hour to integrate. Adding six lines of code can lookup 10 billion URLs across 60 categories of sites 250ms. API Server: We can turn on new services in less than 60 seconds e.g. block gambling, social networks. Index: World’s biggest database of categorized websites by an order of magnitude. Growing hourly. Patent: Application has been filed. It will prevent other companies from checking the security level of links inside apps. Crawlers: The secret sauce: The world’s most advanced Categorization Platform. It’s magical. Index 10 Billion URLs Security API Simple, ultra fast Web Crawlers Malware XXX 57 Categories Phishing Gambling 1 8
- 20. COMPETITION In-App Browsing Security Incumbents Next-Gen Network & Device Security 1 9
- 21. TEAM ALFONSO VALDES DevOps & Full Stack Engineer Alfonso is a certified Ethical Hacker and has worked in Senior Engineering and Network Management positions for Sprint, Texas Instruments and Affiliated Computer Services. Alfonso holds a degree in Computer Engineering from Tecnológico de Monterrey. DAVID ROOKS Head of Data & Frontend Developer David has held senior development positions at Telefonica and BSkyB. He has contributed to more W3C Technical Specifications than mos, including co- authoring the W3C Standard for Web/ URL Categorization and Mobile Web Best Practice Specifications. David holds a Degree in Software Engineering from Queensland University of Technology. David worked as General Manager at Paul’s last company Segala, for 8 years. PAUL WALSH Founder & CEO Paul co-instigated the creation of the W3C Standard for Web/URL categorization. He is one of the seven original founders of the W3C Mobile Web Initiative and has presented on the same stage as Tim Berners-Lee on these topics. Other W3C Standards include HTML. MetaCert’s patent-pending app security solution is based on his unique knowledge and expertise in this field. Paul started his first mobile testing company Segala, in 2003, bootstrapped the company to $2M + in revenue. Opened an Indian restaurant when he was 29 - it now has a Michelin Star. AOL ‘95 - ‘98 First Technical Accounts Manager and Intl Beta Coordinator in Europe. 2 0
- 22. INVESTMENT OPPORTUNITY $750K to $1M on a $5.9M Pre (equity) 14 to 18 months runway $350K Committed: TiE Angels, Monta Vista Capital and TiE LaunchPad $400K required to fill the round. An additional $250K will provide buffer / longer runway. C U R R E N T L Y R A I S I N G Full time Business Development / Senior Engineer to help with the demand we are seeing Both positions have been filled by excellent candidates. The engineer has already started. F U N D I N G W I L L B E U S E D T O 2 1
- 23. MILESTONES Launch Anti-phishing XXX-blocking Turn on 2 new services for content blocking Build HipChat Integration 2 Platform Integrations • Better understand MAU & optimize • Close 5+ Major Platform Integrations • Close 2+ major Team Collaboration / Messaging Services • Launch a new category every 3 months • Close at least 20 Enterprise Customers using HipChat • Launch App Owner ID Verification to combat malicious/cloned apps • Trustmark for apps • Extend our threat intelligence platform to support IoT mac address classification / lookup Jan - June 2015 July - Sept 2015 Oct - Dec 2015 Jan - June 2016 July - Dec 2016 P H A S E 1 P H A S E 2 Build new product to protect users from malicious apps 2 2 Close Seed Build Security Bot for Slack Sell 1,500 monthly subscriptions to SMEs
- 24. APPENDIX
- 25. Our original mission was to secure integrations with every smart phone and tablet in the world, to solve the problem of Internet Safety for kids. Between 2011 - 2014 we raised $1.2M to build crawling technology, a content classification platform (threat intelligence system) and consumer products to show potential partners how to make use of our data. After winning a competitive pitch with Samsung and Apple for integration with over 1.3 BILLION devices, both companies decided that the timing wasn’t right for them. So they decided not to proceed with the integrations. Due to a reduced market size, we decided to build a new Security API and change our business model to Mobile Security, which is now a bigger opportunity. COMPANY HISTORY 2 3
- 26. MetaCert’s patent application will prevent other companies from checking the security level of URLs inside apps. MetaCert has the full support of HipChat - they will help sell our Security Integration - this will make it difficult for a competing service to win enterprise customers in this space. MetaCert is being integrated with the world’s biggest app making platforms - once integrated, it’s extremely unlikely that a platform reseller would want to offer a competing service. Google has a similar API service for desktop browsers, but it’s extremely complicated when compared with MetaCert’s. Google doesn’t have any Developer Tools or Platform integrations. Our patent application will prevent Google from offering their service to app publishers. MetaCert has built the world’s most advanced threat intelligence platform. We have crawled and classified the largest dataset of categorized URLs and IP addresses - with the world’s lowest error rate of false positives at 0.3%. Our technology can be used to classify IoT devices. COMPETITIVE ADVANTAGE 2 4
- 27. Mobile Security Stack Non-Mobile In-App (NEW) App Layer Operating System Device Network Computer MetaCert 4 Area1 Security AVAST Software AVG Barracuda Networks Bit9 BullGuard Bromium ESET FireEye F-Secure Good Technology Google IBM Ionic Security Kaspersky Lookout McAfee MobileIron NQ Mobile Okta OpenPeak Palo Alto Networks Samsung SAP Sophos SonicWALL Symantec Trend Micro Veracode VMWare Websense 2 5 MOBILE SECURITY LANDSCAPE
- 28. MOBILE SECURITY LANDSCAPE Google is MetaCert’s only competitor to defend apps from malware & phishing URLs. But it does not support any other category. And their Safe Browser API is much more complicated than MetaCert’s. Google has no platform integrations at this time so MetaCert benefits from faster adoption. Google will be infringing on MetaCert’s patent should it be approved in February 2016. Good Technology does not offer a service that defends applications from malicious URLs or unwanted content. MetaCert is the 1st to defend apps from malware & phishing URLs. And the only company in the world, to defend applications from pornography + 59 additional categories of web content. The MetaCert API is designed with developers in mind, with a distribution model that hasn’t been addressed before now. Patent application pending. 2 6 Veracode does not offer a service that defends applications from malicious URLs or unwanted content.
- 29. WHAT IS AN IN-APP BROWSER (‘WEBVIEW’) IN PLAIN ENGLISH? ‘WebView’ is a code library provided Apple & Google to help developers display web content inside iOS and Android apps. Developers use a WebView to give apps browser-like capability so end- users don’t need to close the app to open links using a native browser. When the app ecosystems were first launched, Google & Apple couldn’t have known the extent to which their WebViews would be used today - especially with ‘hybrid’ apps being built entirely around a WebView. Hence the lack of security today. HTML5 was only released as a W3C Full Recommendation in 2014, making it possible for virtually anyone to publish ‘hybrid’ apps using a DIY App Making Platform. 2 7
- 30. METACERT’S WEB CATEGORIZATION PLATFORM IS PURE MAGIC! When an end-user tries to share or open the image http://imgur.com/r/sex/ sex.html MetaCert’s API sends a request to MetaCert’s trusted database ‘TrustServ’, to see if it is safe to open or not. The syntax on the right is the response given to the API call. imgur.com is a reputable image sharing website used by millions of people. It would be wrong to categorize the entire site as ‘XXX’ even though there is a large number of images that are nsfw uploaded on a regular basis. It is technically impossible for any company to classify images the minute they are uploaded - or even soon afterwards. So across the web, tens of millions of URLs go unclassified by MetaCert’s competitors. MetaCert’s unique system has classified imgur.com as ‘image sharing’ and imgur.com/r/sex/ as ‘XXX’. This means every image uploaded to that folder will be automatically classified and therefore, detected by our Security API. This is pure magic. And it’s the reason MetaCert Founder Paul Walsh co- instigated the creation of the W3C Standard for web categorization, replacing PICS in 2009! 2 8 { “status”: { “code”: 200, “message”: “OK” }, “data”: { “URLs”: [ { “url”: “http://imgur.com/r/sex/sexy.html”, “type”: “xxx” } ], “Folders”: [ { “folder”: “/r/sex/“, “type”: “xxx”, } ], “Domains”: [ { “domain”: “imgur.com”, “type”: “image-sharing” } ] } }
- 31. THANK YOU Paul Walsh Founder & CEO paul@metacert.com +1 415 994 4274